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Listing of Claims 

1-23. (canceled) 

24. (previously presented) A system, comprising: 

a distributor imit that distributes a plurality of packets and security 
association information associated with the plurality of packets according to a 
distribution scheme; and 

a plurality of security processing engines, coupled to the distributor unit, 
that perform authentication and cryptographic functions, 

wherein the plurality of security processing engines receive at least a 
portion of the security association information associated with the packets, and wherein 
the plurality of security processing engines process the plurality of packets in parallel. 

25. (previously presented) The system of claim 24, wherein the plurality of 
packets are buffered prior to being processed by the plurality of security processing 
engines. 

26. (previously presented) The system of claim 24, further comprising a 
classification module that determines security association information associated with a 
plurality of packets, wherein the classification module is configured to provide at least a 
portion of the security information associated with the packets to the distributor unit. 

27. (previously presented) The system of claim 24, wherein the distributor unit 
and the plurality of security processing engines are on the same chip. 
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28. (previously presented) The system of claim 24, wherein the security 
association information includes a sequence number, an anti-replay window, and a 
lifetime of the security association. 

29. (previously presented) The system of claim 28, wherein the security 
association information further includes an encapsulating security payload (ESP) 
encryption algorithm identifier and one or more ESP encryption keys. 

30. (previously presented) The system of claim 29, wherein the security 
association information further includes an ESP authentication algorithm identifier and 
one or more ESP authentication keys. 

31. (previously presented) The system of claim 28, wherein the security 
association information further includes an authentication header (AH) authentication 
algorithm identifier and one or more AH authentication keys. 

32. (previously presented) The system of claim 28, wherein the security 
association information includes protocol mode information. 

33. (previously presented) The system of claim 24, wherein the distribution 
scheme is a round-robin distribution scheme, wherein the distributor xrnit selects a next 
available security processing engine in a round-robin manner. 

34. (previously presented) The system of claim 24, further comprising an order 
maintenance packet retirement unit. 

35. (previously presented) The system of claim 34, wherein the distributor unit 
assigns packets for processing to a next available security processing engine regardless 
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of the order received and the order maintenance packet retirement unit outputs the 

processed packets such that packet order is maintained. 

36. (previously presented) The system of claim 24, wherein the system is a 

router. 

37. (previously presented) The system of claim 24, wherein the system is a 
firewall. 

38. (previously presented) The system of claim 24, wherein the system is a 
network communication device. 

39. (previously presented) The system of claim 24, wherein the system is a 
security gateway. 

40. (previously presented) The system of claim 24, wherein the system is a 

server. 

41. (previously presented) The system of claim 24, wherein the system is a 
network line card. 
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